1118 matches found
Cesanta Mongoose Web Server 安全漏洞
Cesanta Mongoose Web Server is a cross-platform embedded server and web library written in C from Cesanta Ireland. A security vulnerability exists in Cesanta Mongoose Web Server version v7.14, which stems from the presence of out-of-range pointer offsets that allow an attacker to send unexpected...
PT-2024-29917 · Cesanta · Cesanta Mongoose Web Server
Name of the Vulnerable Software and Affected Versions: Cesanta Mongoose Web Server version 7.14 Description: The issue allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space due to an Out-of-range Pointer Offset vulnerability...
Cesanta Mongoose Web Server 安全漏洞
Cesanta Mongoose Web Server is a cross-platform embedded server and web library written in C from Cesanta Ireland. A security vulnerability exists in Cesanta Mongoose Web Server version v7.14, which stems from the presence of out-of-range pointer offsets, which could allow an attacker to send...
Cesanta Mongoose Web Server 安全漏洞
Cesanta Mongoose Web Server is a cross-platform embedded server and web library written in C by Cesanta Ireland. A security vulnerability exists in Cesanta Mongoose Web Server version v7.14, which stems from an improper delimiter neutralization that causes an infinite loop error to be triggered...
Cesanta MJS mjs_array_length function denial of service vulnerability
Cesanta MJS is an embedded JavaScript engine for C/C++ from Cesanta Ireland. Designed for microcontrollers with limited resources. The main design goals were a small footprint and simple C/C++ interoperability. A denial of service vulnerability exists in the Cesanta MJS mjsarraylength function,...
CVE-2024-35492
Cesanta Mongoose commit b316989 was discovered to contain a NULL pointer dereference via the scpy function at src/fmt.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted MQTT packet...
CVE-2024-35492
Cesanta Mongoose commit b316989 was discovered to contain a NULL pointer dereference via the scpy function at src/fmt.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted MQTT packet...
CVE-2024-35492
The CVE-2024-35492 entry concerns Cesanta Mongoose commit b316989, where a NULL pointer dereference in the scpy function (src/fmt.c) can trigger a Denial of Service via a crafted MQTT packet. Public records consistently identify the affected component as Cesanta Mongoose and attribute the issue t...
CVE-2024-35492
Cesanta Mongoose commit b316989 was discovered to contain a NULL pointer dereference via the scpy function at src/fmt.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted MQTT packet...
Cesanta Mongoose 安全漏洞
Cesanta Mongoose is a suite of embedded server libraries from the Irish company Cesanta, which includes functionality for TCP, HTTP clients and servers, and WenSocket clients and servers. A security vulnerability exists in Cesanta Mongoose version b316989, which stems from a null pointer...
PT-2024-26516 · Cesanta · Mongoose
Name of the Vulnerable Software and Affected Versions: Cesanta Mongoose version b316989 Description: The issue is related to a NULL pointer dereference via the scpy function at src/fmt.c. This allows attackers to cause a Denial of Service DoS via a crafted MQTT packet. Recommendations: For versio...
CVE-2024-35384
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsarraylength function in the mjs.c file...
CVE-2024-35386
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsdogc function in the mjs.c file...
CVE-2024-35385
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsmkffisig function in the mjs.c file...
CVE-2024-35385
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsmkffisig function in the mjs.c file...
CVE-2024-35385
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsmkffisig function in the mjs.c file...
CVE-2024-35385
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_mk_ffi_sig function in mjs.c. The CVSSv3.1 base score is 4.3 (Medium) with network access, low attack complexity, and low privileges required. APT/exploitation details are not provided; PT-2024-26471 ...
CVE-2024-35385
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsmkffisig function in the mjs.c file...
CVE-2024-35384
Cesanta MJS 2.20.0 contains a DoS vulnerability in mjs_array_length (mjs.c) due to improper handling of incoming error messages. A remote attacker could trigger the issue to cause denial of service. Affected product is the embedded JavaScript engine; no patch/version remediation details are provi...